last executing test programs: 1.039138524s ago: executing program 0 (id=1): r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x7fffffff, 0x0, 0xfffffffb, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) socket(0x2, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="c8", 0x1}], 0x1, 0x0}, 0x0) freebsd10_pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$DIOCNATLOOK(r1, 0x8008745b, &(0x7f00000003c0)="28a7c7f98123061e161b6b12c23cc0a40148f8e05690192e34341bddc9ba95d2b36fe4cec62aeac2ecb2b57b78b656982e428dd9f6c544832839ca46b6bce09c69a6446df7968b52295482e036012ffe624634") 722.552659ms ago: executing program 3 (id=4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f0000000040)="e2", 0x1, [], 0x0, 0x0, 0x0, {0x0, 0x7, 0x0}, {0x0, 0x0, @sival_int, @ke_flags=0xc020}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sync() 709.540558ms ago: executing program 2 (id=3): open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r0 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r1 = socket(0x1c, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0x62, 0x1c, 0x3, 0xfffffffb, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0xffffffff, @empty, 0xfffffffe}, 0x1c) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2000000, 0x126) writev(r1, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x7b8}], 0x1) sendfile(r2, r1, 0x0, 0xc, 0x0, 0x0, 0x0) 677.869255ms ago: executing program 1 (id=2): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f00000004c0)='./file2\x00', r0, &(0x7f0000000300)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open$dir(&(0x7f0000000280)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000500)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x4) renameat(r2, &(0x7f0000000480)='./file0\x00', r0, &(0x7f0000000400)='./file0\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)='./file0\x00') 343.167919ms ago: executing program 2 (id=5): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r0, 0x80000001, &(0x7f00000004c0)='E', 0x1, [0x3], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @ke_flags=0xc088}}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x200000, 0xd2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x12, r1, 0x0) sigaction(0x6, &(0x7f0000000200)={0x0, 0x35, {[0xfffff801, 0x50e5, 0xfffffffe]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f000008c000/0x4000)=nil, 0x4000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) 222.912451ms ago: executing program 1 (id=6): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200201, 0x0) aio_write(&(0x7f0000000240)={r1, 0x80000001, &(0x7f00000004c0)='E', 0x1, [0x3], 0x200000000000000, 0x8, 0x0, {0x1, 0x7, 0x0}, {0x0, 0x20000005, @sigval_int=0x2e5562f1, @ke_flags=0xc088}}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r2, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) preadv(r0, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) 114.517893ms ago: executing program 3 (id=7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FILEMON_SET_FD(r2, 0xc0045301, &(0x7f0000000000)=r0) r3 = setsid() ioctl$FILEMON_SET_PID(r2, 0xc0045302, &(0x7f00000002c0)=r3) r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0x200, 0x28) 0s ago: executing program 3 (id=8): openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f000016d000/0x1000)=nil, 0x1000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f00008ab000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. lock order reversal: (sleepable after non-sleepable) 1st 0xfffffe005a2f7508 tun_mtx (tun_mtx, sleep mutex) @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1601 2nd 0xffffffff83cbdfc0 tun_ioctl (tun_ioctl, sx) @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1300 lock order tun_ioctl -> tun_mtx established at: #0 0xffffffff81653d21 at witness_checkorder+0x781 #1 0xffffffff814d85d7 at __mtx_lock_flags+0x187 #2 0xffffffff818312cc at tunifioctl+0x15c #3 0xffffffff8180c73e at ifhwioctl+0xefe #4 0xffffffff818108b2 at ifioctl+0xde2 #5 0xffffffff81661eaa at kern_ioctl+0x4ca #6 0xffffffff816618ee at sys_ioctl+0x36e #7 0xffffffff82124b02 at amd64_syscall+0x4e2 #8 0xffffffff820c9a5b at fast_syscall_common+0xf8 lock order tun_mtx -> tun_ioctl attempted at: #0 0xffffffff81654bf2 at witness_checkorder+0x1652 #1 0xffffffff81543479 at _sx_xlock+0x139 #2 0xffffffff818311fa at tunifioctl+0x8a #3 0xffffffff8180d5ad at ifhwioctl+0x1d6d #4 0xffffffff8182ee08 at tunioctl+0xd38 #5 0xffffffff811be2f6 at devfs_ioctl+0x266 #6 0xffffffff822de827 at VOP_IOCTL_APV+0x87 #7 0xffffffff817b30d7 at vn_ioctl+0x3c7 #8 0xffffffff811bf1b9 at devfs_ioctl_f+0x69 #9 0xffffffff81661eaa at kern_ioctl+0x4ca #10 0xffffffff816618ee at sys_ioctl+0x36e #11 0xffffffff82124b02 at amd64_syscall+0x4e2 #12 0xffffffff820c9a5b at fast_syscall_common+0xf8 Sleeping thread (tid 100123, pid 793) owns a non-sleepable lock KDB: stack backtrace of thread 100123: sched_switch() at sched_switch+0x1055/frame 0xfffffe0057534fa0 mi_switch() at mi_switch+0x33e/frame 0xfffffe0057534fd0 sleepq_switch() at sleepq_switch+0x1f0/frame 0xfffffe0057535030 _sx_xlock_hard() at _sx_xlock_hard+0xcdc/frame 0xfffffe00575351f0 _sx_xlock() at _sx_xlock+0x1ed/frame 0xfffffe00575352b0 tunifioctl() at tunifioctl+0x8a/frame 0xfffffe0057535370 ifhwioctl() at ifhwioctl+0x1d6d/frame 0xfffffe0057535630 tunioctl() at tunioctl+0xd38/frame 0xfffffe0057535730 devfs_ioctl() at devfs_ioctl+0x266/frame 0xfffffe0057535820 VOP_IOCTL_APV() at VOP_IOCTL_APV+0x87/frame 0xfffffe0057535850 vn_ioctl() at vn_ioctl+0x3c7/frame 0xfffffe0057535a60 devfs_ioctl_f() at devfs_ioctl_f+0x69/frame 0xfffffe0057535ab0 kern_ioctl() at kern_ioctl+0x4ca/frame 0xfffffe0057535b90 sys_ioctl() at sys_ioctl+0x36e/frame 0xfffffe0057535d10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0057535f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0057535f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x825d0cf08, rbp = 0x825d0cf80 --- panic: sleeping thread holds tun_mtx cpuid = 0 time = 1749401801 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe005727f9b0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe005727fb10 vpanic() at vpanic+0x257/frame 0xfffffe005727fcd0 panic() at panic+0xb5/frame 0xfffffe005727fd90 propagate_priority() at propagate_priority+0x521/frame 0xfffffe005727fde0 turnstile_wait() at turnstile_wait+0x663/frame 0xfffffe005727fe50 __mtx_lock_sleep() at __mtx_lock_sleep+0x452/frame 0xfffffe005727ff90 __mtx_lock_flags() at __mtx_lock_flags+0x1fe/frame 0xfffffe0057280080 tunstart_l2() at tunstart_l2+0x74/frame 0xfffffe00572800e0 tap_transmit() at tap_transmit+0x1d0/frame 0xfffffe0057280130 ether_output_frame() at ether_output_frame+0x30c/frame 0xfffffe00572801f0 ether_output() at ether_output+0x114b/frame 0xfffffe0057280360 ip6_output_send() at ip6_output_send+0x1b6/frame 0xfffffe00572803e0 ip6_output() at ip6_output+0x484b/frame 0xfffffe0057280930 mld_dispatch_packet() at mld_dispatch_packet+0x8d1/frame 0xfffffe0057280a90 mld_fasttimo() at mld_fasttimo+0x1900/frame 0xfffffe0057280cd0 softclock_call_cc() at softclock_call_cc+0x422/frame 0xfffffe0057280e80 softclock_thread() at softclock_thread+0x200/frame 0xfffffe0057280ef0 fork_exit() at fork_exit+0xcc/frame 0xfffffe0057280f30 fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0057280f30 --- trap 0, rip = 0, rsp = 0, rbp = 0 --- KDB: enter: panic [ thread pid 2 tid 100031 ] Stopped at kdb_enter+0x6e: movq $0,0x25bdb47(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0 rbx 0xffffffff827b4500 .str.27 rsp 0xfffffe005727faf0 rbp 0xfffffe005727fb10 rsi 0 rdi 0xffffffff816154a9 printf+0x149 r8 0 r9 0xffffffff r10 0x5 r11 0x1f r12 0xfffffe000801a780 r13 0xfffffffffffffffe r14 0xffffffff827b4500 .str.27 r15 0 rip 0xffffffff815ff64e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25bdb47(%rip) db> show proc Process 2 (clock) at 0xfffffe0008008020: state: NORMAL uid: 0 gids: 0 parent: pid 0 at 0xffffffff83b478e0 ABI: null flag: 0x10000284 flag2: 0 reaper: 0xffffffff83b478e0 reapsubtree: 2 sigparent: 20 vmspace: 0xffffffff83b488c0 (map 0xffffffff83b488c0) (map.pmap 0xffffffff83b48960) (pmap 0xffffffff83b489d0) threads: 2 100031 L *tun_mtx 0xfffffe0008031e40 [clock (0)] 100032 I [clock (1)] db> ps pid ppid pgrp uid state wmesg wchan cmd 825 767 767 0 R (threaded) syz-executor 100120 RunQ syz-executor 100141 RunQ syz-executor 823 765 765 0 R (threaded) syz-executor 100119 RunQ syz-executor 100136 S uwait 0xfffffe0058a78280 syz-executor 100137 S uwait 0xfffffe0058cd2880 syz-executor 100138 S uwait 0xfffffe006e723680 syz-executor 822 766 766 0 R (threaded) syz-executor 100134 RunQ syz-executor 100135 S uwait 0xfffffe006e722280 syz-executor 100140 RunQ syz-executor 821 1 767 0 S uwait 0xfffffe0058cd2380 syz-executor 820 819 424 0 L *tun_mtx 0xfffffe0008031e40 ifconfig 819 810 424 0 S wait 0xfffffe005490a5a0 sh 818 1 818 0 Ss select 0xfffffe006e722840 dhclient 815 0 0 0 DL aiordy 0xfffffe00548ce5a0 [aiod4] 814 0 0 0 DL aiordy 0xfffffe00548e6ae0 [aiod3] 813 0 0 0 DL aiordy 0xfffffe00548e7b00 [aiod2] 812 0 0 0 DL aiordy 0xfffffe00548e7040 [aiod1] 810 787 424 0 S wait 0xfffffe00548e75a0 dhclient 793 764 764 0 T (threaded) syz-executor 100091 Run CPU 1 syz-executor 100123 D tun_ioc 0xffffffff83cbdfc0 syz-executor 100124 S uwait 0xfffffe0058a78180 syz-executor 787 424 424 0 S wait 0xfffffe000800a5c0 sh 767 763 767 0 S nanslp 0xffffffff83b9e540 syz-executor 766 763 766 0 R syz-executor 765 763 765 0 S nanslp 0xffffffff83b9e541 syz-executor 764 763 764 0 S nanslp 0xffffffff83b9e540 syz-executor 763 761 761 0 S select 0xfffffe006e7232c0 syz-executor 761 759 761 0 Ss pause 0xfffffe00548cf110 csh 759 682 759 0 Ss select 0xfffffe006e7234c0 sshd 748 1 748 0 Ss+ ttyin 0xfffffe0058a72cb0 getty 747 1 747 0 Ss+ ttyin 0xfffffe0058e0a0b0 getty 746 1 746 0 Ss+ ttyin 0xfffffe0058a718b0 getty 745 1 745 0 Ss+ ttyin 0xfffffe0058a71cb0 getty 744 1 744 0 Ss+ ttyin 0xfffffe0058e0a4b0 getty 743 1 743 0 Ss+ ttyin 0xfffffe0058e0a8b0 getty 742 1 742 0 Ss+ ttyin 0xfffffe0058e0acb0 getty 741 1 741 0 Ss+ ttyin 0xfffffe0058e0b0b0 getty 740 1 740 0 Ss+ ttyin 0xfffffe0058e0b4b0 getty 738 1 18 0 S+ piperd 0xfffffe0059fd4b80 logger 737 736 18 0 S+ nanslp 0xffffffff83b9e540 sleep 736 1 18 0 S+ wait 0xfffffe0054808040 sh 686 1 686 0 Ss nanslp 0xffffffff83b9e540 cron 682 1 682 0 Ss select 0xfffffe00546f57c0 sshd 495 1 495 0 Ss select 0xfffffe00546f58c0 syslogd 424 1 424 0 Ss wait 0xfffffe00548cd580 devd 423 1 423 65 Ss select 0xfffffe0058cd31c0 dhclient 338 1 338 0 Ss select 0xfffffe0058a783c0 dhclient 335 1 335 0 Ss select 0xfffffe00546f59c0 dhclient 17 0 0 0 DL syncer 0xffffffff83cbbda0 [syncer] 16 0 0 0 DL vlruwt 0xfffffe0008028040 [vnlru] 15 0 0 0 DL (threaded) [bufdaemon] 100080 D psleep 0xffffffff83cba360 [bufdaemon] 100083 D - 0xffffffff83001ec0 [bufspacedaemon-0] 100095 D sdflush 0xfffffe005a0abce8 [/ worker] 9 0 0 0 DL psleep 0xffffffff83d05380 [vmdaemon] 8 0 0 0 DL (threaded) [pagedaemon] 100078 D psleep 0xffffffff83ceb2f8 [dom0] 100081 D launds 0xffffffff83ceb304 [laundry: dom0] 100082 D umarcl 0xffffffff81dd26b0 [uma] 7 0 0 0 DL - 0xffffffff8391bcd0 [rand_harvestq] 6 0 0 0 DL pftm 0xffffffff843b7850 [pf purge] 5 0 0 0 DL waiting 0xffffffff84661700 [sctp_iterator] 4 0 0 0 DL (threaded) [cam] 100046 D - 0xffffffff838e6340 [doneq0] 100047 D - 0xffffffff838e62c0 [async] 100076 D - 0xffffffff838e6140 [scanner] 3 0 0 0 DL (threaded) [crypto] 100043 D crypto_ 0xffffffff83ce6b40 [crypto] 100044 D crypto_ 0xfffffe00546f9d30 [crypto returns 0] 100045 D crypto_ 0xfffffe00546f9d80 [crypto returns 1] 14 0 0 0 DL seqstat 0xfffffe0007f8e488 [sequencer 00] 13 0 0 0 DL (threaded) [geom] 100037 D - 0xffffffff83b46f00 [g_event] 100038 D - 0xffffffff83b46f20 [g_up] 100039 D - 0xffffffff83b46f40 [g_down] 2 0 0 0 LL (threaded) [clock] 100031 L *tun_mtx 0xfffffe0008031e40 [clock (0)] 100032 I [clock (1)] 12 0 0 0 WL (threaded) [intr] 100013 I [swi6: task queue] 100014 I [swi6: Giant taskq] 100016 I [swi5: fast taskq] 100033 I [swi1: netisr 0] 100034 I [swi1: hpts] 100035 I [swi1: hpts] 100048 I [irq24: virtio_pci0] 100049 I [irq25: virtio_pci0] 100050 I [irq26: virtio_pci0] 100051 I [irq27: virtio_pci0] 100052 I [irq28: virtio_pci1] 100053 I [irq29: virtio_pci1] 100054 I [irq30: virtio_pci1] 100055 I [irq31: virtio_pci1] 100056 I [irq32: virtio_pci1] 100061 I [irq10: virtio_pci2] 100063 I [irq1: atkbd0] 100064 I [irq12: psm0] 100065 I [swi0: uart uart++] 100069 I [swi1: pf send] 11 0 0 0 RL (threaded) [idle] 100003 CanRun [idle: cpu0] 100004 CanRun [idle: cpu1] 1 0 1 0 SLs wait 0xfffffe0008009040 [init] 10 0 0 0 DL audit_w 0xffffffff83ce75e0 [audit] 0 0 0 0 DLs (threaded) [kernel] 100000 D parked 0xffffffff84c2eff0 [swapper] 100005 D - 0xfffffe0054631000 [softirq_0] 100006 D - 0xfffffe0054630e00 [softirq_1] 100007 D - 0xfffffe0054630d00 [if_io_tqg_0] 100008 D - 0xfffffe0054630c00 [if_io_tqg_1] 100009 D - 0xfffffe0054630b00 [if_config_tqg_0] 100010 D - 0xfffffe0007fd4000 [kqueue_ctx taskq] 100011 D - 0xfffffe0007fd3e00 [jail_remove taskq] 100012 D - 0xfffffe0007fd3d00 [bus taskq] 100015 D - 0xfffffe0007fd3a00 [thread taskq] 100017 D - 0xfffffe0007fd3800 [aiod_kick taskq] 100018 D - 0xfffffe0007fd3700 [deferred_unmount ta] 100019 D - 0xfffffe0007fd3600 [inm_free taskq] 100020 D - 0xfffffe0007fd3500 [in6m_free taskq] 100021 D - 0xfffffe0007fd3400 [linuxkpi_irq_wq] 100022 D - 0xfffffe0007fd3300 [linuxkpi_short_wq_0] 100023 D - 0xfffffe0007fd3300 [linuxkpi_short_wq_1] 100024 D - 0xfffffe0007fd3300 [linuxkpi_short_wq_2] 100025 D - 0xfffffe0007fd3300 [linuxkpi_short_wq_3] 100026 D - 0xfffffe0007fd3200 [linuxkpi_long_wq_0] 100027 D - 0xfffffe0007fd3200 [linuxkpi_long_wq_1] 100028 D - 0xfffffe0007fd3200 [linuxkpi_long_wq_2] 100029 D - 0xfffffe0007fd3200 [linuxkpi_long_wq_3] 100036 D - 0xfffffe0007fd3100 [firmware taskq] 100041 D - 0xfffffe0007fd2500 [crypto_0] 100042 D - 0xfffffe0007fd2500 [crypto_1] 100057 D - 0xfffffe0007fd1600 [vtnet0 rxq 0] 100058 D - 0xfffffe0007fd1500 [vtnet0 txq 0] 100059 D - 0xfffffe0007fd1400 [vtnet0 rxq 1] 100060 D - 0xfffffe0007fd1300 [vtnet0 txq 1] 100062 D vtbslp 0xfffffe00546f2000 [virtio_balloon] 100066 D - 0xffffffff827b9840 [deadlkres] 100070 D - 0xfffffe0007fd2000 [acpi_task_0] 100071 D - 0xfffffe0007fd2000 [acpi_task_1] 100072 D - 0xfffffe0007fd2000 [acpi_task_2] 100074 D - 0xfffffe0007fd4100 [mca taskq] 100075 D - 0xfffffe0007fd1e00 [CAM taskq] 100077 D - 0xfffffe0007fd0d00 [ipsec_offload] db> show all locks Process 822 (syz-executor) thread 0xfffffe005491d000 (100140) exclusive rw vmobject (vmobject) r = 0 (0xfffffe00549122e8) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_fault.c:1610 shared sx vm map (user) (vm map (user)) r = 0 (0xfffffe00548b32a8) locked @ /syzkaller/managers/main/kernel/sys/vm/vm_map.c:4993 Process 820 (ifconfig) thread 0xfffffe005491f000 (100132) exclusive sx tun_ioctl (tun_ioctl) r = 0 (0xffffffff83cbdfc0) locked @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1300 exclusive sx in_control (in_control) r = 0 (0xffffffff83cc0bc0) locked @ /syzkaller/managers/main/kernel/sys/netinet/in.c:367 Process 793 (syz-executor) thread 0xfffffe00548bf000 (100091) exclusive sleep mutex process lock (process lock) r = 0 (0xfffffe000800a188) locked @ /syzkaller/managers/main/kernel/sys/kern/kern_exit.c:259 Process 793 (syz-executor) thread 0xfffffe00548d6780 (100123) exclusive sleep mutex tun_mtx (tun_mtx) r = 0 (0xfffffe005a2f7508) locked @ /syzkaller/managers/main/kernel/sys/net/if_tuntap.c:1601 Process 2 (clock) thread 0xfffffe000801a780 (100031) exclusive sleep mutex mld_mtx (mld_mtx) r = 0 (0xffffffff83ce2280) locked @ /syzkaller/managers/main/kernel/sys/netinet6/mld6.c:1346 exclusive sleep mutex in6_multi_list_mtx (in6_multi_list_mtx) r = 0 (0xffffffff83ce20a0) locked @ /syzkaller/managers/main/kernel/sys/netinet6/mld6.c:1345 shared rw vnet_rwlock (vnet_rwlock) r = 0 (0xffffffff83cc0340) locked @ /syzkaller/managers/main/kernel/sys/netinet6/mld6.c:1304 db> show malloc Type InUse MemUse Requests pf_hash 6 12804K 6 linker 376 5067K 486 tcp_hpts 7 4801K 7 devbuf 4188 4324K 4213 sysctloid 34774 2049K 34849 vtbuf 24 1968K 46 kobj 331 1324K 495 newblk 467 1141K 552 vfscache 3 1025K 3 pcb 23 669K 50 inodedep 38 526K 103 ufs_quota 1 512K 1 vfs_hash 1 512K 1 callout 2 512K 2 intr 4 472K 4 subproc 125 258K 893 vnet_data 2 224K 2 acpitask 1 224K 1 KTRACE 100 200K 100 acpica 1674 184K 54426 filedesc 20 153K 79 vmem 5 144K 6 tidhash 3 141K 3 pagedep 18 133K 33 tfo_ccache 1 128K 1 IP reass 1 128K 1 DEVFS1 109 109K 126 sem 4 106K 4 gtaskqueue 18 98K 18 bus 997 82K 5063 mtx_pool 3 74K 3 syncache 1 68K 1 NFSD srvcache 3 68K 3 module 521 66K 521 ddb_capture 1 64K 1 kdtrace 194 38K 968 temp 35 37K 1828 umtx 288 36K 288 hostcache 1 32K 1 shm 1 32K 1 DEVFS3 128 32K 138 msg 4 30K 4 kbdmux 6 28K 6 DEVFS_RULE 56 20K 56 ifaddr 67 19K 69 BPF 14 19K 14 ufs_mount 4 17K 5 proc 3 17K 3 LRO 16 17K 16 tty 16 16K 16 routetbl 124 16K 395 ithread 90 15K 90 bus-sc 34 15K 1647 eventhandler 163 14K 163 lltable 43 14K 43 ifnet 7 13K 7 ether_multi 152 13K 162 kenv 95 12K 95 GEOM 61 11K 477 CAM queue 5 11K 1528 rman 82 10K 437 shmfd 4 10K 4 rpc 8 9K 8 plimit 23 9K 332 in6_multi 65 9K 65 bmsafemap 2 9K 71 devstat 4 9K 4 UART 12 9K 12 ksem 1 8K 1 pfs_vncache 1 8K 1 audit_evclass 239 8K 301 taskqueue 69 8K 69 sglist 6 7K 6 CAM DEV 3 6K 510 cred 23 6K 180 pfs_nodes 22 6K 22 ufs_dirhash 24 5K 24 UMA 265 5K 265 pf_ifnet 10 5K 19 vt 11 5K 11 memdesc 1 4K 1 MCA 32 4K 32 evdev 4 4K 4 kqueue 59 4K 829 pwddesc 58 4K 826 acpisem 28 4K 28 indirdep 13 4K 18 dirrem 12 3K 50 selfd 45 3K 7332 DEVFSP 45 3K 49 terminal 11 3K 11 proc-args 85 3K 1867 session 21 3K 33 acpidev 20 3K 20 hhook 8 3K 10 clone 9 3K 9 uidinfo 3 3K 6 kcovinfo 36 3K 36 local_apic 1 2K 1 io_apic 1 2K 1 diradd 16 2K 67 ipsec-saq 2 2K 2 ip6ndp 12 2K 13 lockf 18 2K 25 mkdir 14 2K 44 Unitno 28 2K 50 sctp_ifa 13 2K 14 newdirblk 13 2K 22 freefile 13 2K 26 CAM XPT 22 2K 543 in_multi 6 2K 8 tun 4 2K 4 toponodes 6 2K 6 ipsecpolicy 2 2K 2 select 10 2K 28 msi 9 2K 9 netlink 2 2K 70 softdep 1 1K 1 sahead 1 1K 1 secasvar 1 1K 1 nhops 6 1K 8 vnodemarker 2 1K 10 NFSD session 1 1K 1 CAM periph 4 1K 271 freework 4 1K 45 ipsec 3 1K 3 sctp_ifn 6 1K 14 freeblks 3 1K 32 mld 6 1K 6 igmp 6 1K 6 pfil 6 1K 6 isadev 6 1K 6 mount 16 1K 89 pci_link 10 1K 10 crypto 4 1K 4 CC Mem 5 1K 8 encap_export_host 12 1K 12 osd 10 1K 24 cdev 2 1K 2 lkpikmalloc 8 1K 9 inpcbpolicy 13 1K 157 chacha20random 1 1K 1 biobuf 1 1K 1 vnodes 1 1K 1 procdesc 2 1K 8 NFSD lckfile 1 1K 1 NFSD V4client 1 1K 1 DEVFS 9 1K 10 CAM SIM 2 1K 2 feeder 7 1K 7 cryptodev 3 1K 36 tcpfunc 3 1K 3 loginclass 3 1K 5 prison 6 1K 6 nexusdev 8 1K 8 apmdev 1 1K 1 atkbddev 2 1K 2 aio 4 1K 4 pmchooks 1 1K 1 CAM path 4 1K 1034 CAM dev queue 2 1K 2 CAM I/O Scheduler 1 1K 1 soname 4 1K 3307 filecaps 4 1K 70 sctp_vrf 1 1K 1 vnet 1 1K 1 pmc 1 1K 1 entropy 2 1K 32 acpiintr 1 1K 1 cpus 2 1K 2 vnet_data_free 1 1K 1 Per-cpu 1 1K 1 p1003.1b 1 1K 1 ipcomp 0 0K 0 esp 0 0K 0 ah 0 0K 0 mqdata 0 0K 0 tcp_pcm_rack 0 0K 0 tcp_do_rack 0 0K 0 tcp_fsb_rack 0 0K 0 filemon 0 0K 1 sctp_mcore 0 0K 0 sctp_socko 0 0K 0 sctp_iter 0 0K 10 sctp_mvrf 0 0K 0 sctp_timw 0 0K 0 sctp_cpal 0 0K 0 sctp_cmsg 0 0K 0 sctp_stre 0 0K 0 sctp_athi 0 0K 0 sctp_athm 0 0K 0 sctp_atky 0 0K 0 sctp_atcl 0 0K 0 sctp_a_it 0 0K 10 sctp_aadr 0 0K 0 sctp_stro 0 0K 0 sctp_stri 0 0K 0 sctp_map 0 0K 0 pf_table 0 0K 0 pf_rule 0 0K 0 pf_altq 0 0K 0 pf_osfp 0 0K 0 pf_krule_item 0 0K 0 pf_temp 0 0K 0 madt_table 0 0K 2 smartpqi 0 0K 0 ixl 0 0K 0 ice-resmgr 0 0K 0 ice-osdep 0 0K 0 ice 0 0K 0 iavf 0 0K 0 axgbe 0 0K 0 fpukern_ctx 0 0K 0 xen_intr 0 0K 0 xen_hvm 0 0K 0 legacydrv 0 0K 0 NMI handlers 0 0K 0 bounce 0 0K 0 busdma 0 0K 0 qpidrv 0 0K 0 dmar_idpgtbl 0 0K 0 dmar_dom 0 0K 0 dmar_ctx 0 0K 0 amdiommu_dom 0 0K 0 amdiommu_ctx 0 0K 0 isci 0 0K 0 iommu_dmamap 0 0K 0 hyperv_socket 0 0K 0 bxe_ilt 0 0K 0 aesni_data 0 0K 0 xenbus 0 0K 0 vm_fictitious 0 0K 0 UMAHash 0 0K 0 vm_pgdata 0 0K 0 jblocks 0 0K 0 savedino 0 0K 19 sentinel 0 0K 0 jfsync 0 0K 0 jtrunc 0 0K 0 sbdep 0 0K 3 jsegdep 0 0K 0 jseg 0 0K 0 jfreefrag 0 0K 0 jfreeblk 0 0K 0 jnewblk 0 0K 0 jmvref 0 0K 0 jremref 0 0K 0 jaddref 0 0K 0 freedep 0 0K 0 freefrag 0 0K 4 allocindir 0 0K 0 allocdirect 0 0K 0 ufs_trim 0 0K 0 mactemp 0 0K 0 audit_trigger 0 0K 0 audit_pipe_presel 0 0K 0 audit_pipeent 0 0K 0 audit_pipe 0 0K 0 audit_evname 0 0K 0 audit_bsm 0 0K 0 audit_gidset 0 0K 0 audit_text 0 0K 0 audit_path 0 0K 0 audit_data 0 0K 0 audit_cred 0 0K 0 ktls_ocf 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS_RX 0 0K 0 MLX5EEPROM 0 0K 0 MLX5E_TLS 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EN 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5DUMP 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 MLX5EEPROM 0 0K 0 simple_attr 0 0K 0 seq_file 0 0K 0 lkpiskb 0 0K 0 radix 0 0K 0 idr 0 0K 0 lkpindev 0 0K 0 lkpimhi 0 0K 0 lkpifw 0 0K 0 lkpi80211 0 0K 0 NLM 0 0K 0 ipsec-spdcache 0 0K 0 ipsec-reg 0 0K 0 ipsec-misc 0 0K 0 ipsecrequest 0 0K 0 ip6opt 0 0K 3 ip6_msource 0 0K 0 ip6_moptions 0 0K 0 in6_mfilter 0 0K 0 frag6 0 0K 0 tcplog 0 0K 0 tcp_hwpace 0 0K 0 ip_msource 0 0K 0 ip_moptions 0 0K 0 in_mfilter 0 0K 0 ipid 0 0K 0 80211scan 0 0K 0 80211ratectl 0 0K 0 80211power 0 0K 0 80211nodeie 0 0K 0 80211node 0 0K 0 80211mesh_gt 0 0K 0 80211mesh_rt 0 0K 0 80211perr 0 0K 0 80211prep 0 0K 0 80211preq 0 0K 0 80211dfs 0 0K 0 80211crypto 0 0K 0 80211vap 0 0K 0 iflib 0 0K 0 vlan 0 0K 0 gif 0 0K 0 ifdescr 0 0K 0 zlib 0 0K 19 fadvise 0 0K 0 VN POLL 0 0K 0 statfs 0 0K 181 namei_tracker 0 0K 0 export_host 0 0K 0 cl_savebuf 0 0K 8 lio 0 0K 0 acl 0 0K 0 mbuf_tag 0 0K 0 ktls 0 0K 0 accf 0 0K 0 pts 0 0K 0 timerfd 0 0K 0 iov 0 0K 13651 ioctlops 0 0K 96 eventfd 0 0K 0 Witness 0 0K 0 stack 0 0K 0 sbuf 0 0K 288 firmware 0 0K 0 compressor 0 0K 0 SWAP 0 0K 0 sysctltmp 0 0K 648 sysctl 0 0K 3 ekcd 0 0K 0 dumper 0 0K 0 sendfile 0 0K 1 rctl 0 0K 0 cache 0 0K 0 prison_racct 0 0K 0 Fail Points 0 0K 0 sigio 0 0K 1 filedesc_to_leader 0 0K 0 pwd 0 0K 0 tty console 0 0K 0 boottrace 0 0K 0 isofs_node 0 0K 0 isofs_mount 0 0K 0 tr_raid5_data 0 0K 0 tr_raid1e_data 0 0K 0 tr_raid1_data 0 0K 0 tr_raid0_data 0 0K 0 tr_concat_data 0 0K 0 md_sii_data 0 0K 0 md_promise_data 0 0K 0 md_nvidia_data 0 0K 0 md_jmicron_data 0 0K 0 md_intel_data 0 0K 0 md_ddf_data 0 0K 0 raid_data 0 0K 72 geom_flashmap 0 0K 0 tmpfs dir 0 0K 0 tmpfs name 0 0K 0 tmpfs mount 0 0K 0 tmpfs extattr 0 0K 0 NFS FHA 0 0K 0 newnfsmnt 0 0K 0 newnfsclient_req 0 0K 0 NFSCL layrecall 0 0K 0 NFSCL session 0 0K 0 NFSCL sockreq 0 0K 0 NFSCL devinfo 0 0K 0 NFSCL flayout 0 0K 0 NFSCL layout 0 0K 0 NFSD rollback 0 0K 0 NFSCL diroff 0 0K 0 NEWNFSnode 0 0K 0 NFSCL lck 0 0K 0 NFSCL lckown 0 0K 0 NFSCL client 0 0K 0 NFSCL deleg 0 0K 0 NFSCL open 0 0K 0 NFSCL owner 0 0K 0 NFS fh 0 0K 0 NFS req 0 0K 0 NFSD usrgroup 0 0K 0 NFSD string 0 0K 0 NFSD V4lock 0 0K 0 NFSD V4state 0 0K 0 msdosfs_fat 0 0K 0 msdosfs_mount 0 0K 0 msdosfs_node 0 0K 0 DEVFS4 0 0K 0 DEVFS2 0 0K 0 gntdev 0 0K 0 privcmd_dev 0 0K 0 evtchn_dev 0 0K 0 xenstore 0 0K 0 xnb 0 0K 0 xen_acpi 0 0K 0 xbbd 0 0K 0 xbd 0 0K 0 Balloon 0 0K 0 sysmouse 0 0K 0 vtfont 0 0K 0 pvscsi 0 0K 0 USBdev 0 0K 0 USB 0 0K 0 twsbuf 0 0K 0 tcp_log_dev 0 0K 0 midi buffers 0 0K 0 mixer 0 0K 0 ac97 0 0K 0 hdacc 0 0K 0 hdac 0 0K 0 hdaa 0 0K 0 SIIS driver 0 0K 0 PUC 0 0K 0 ppbusdev 0 0K 0 sr_iov 0 0K 0 OCS 0 0K 0 OCS 0 0K 0 nvme 0 0K 0 nvd 0 0K 0 netmap 0 0K 0 mwldev 0 0K 0 MVS driver 0 0K 0 mpi3mrbuf 0 0K 0 mrsasbuf 0 0K 0 mpt_user 0 0K 0 mps_user 0 0K 0 MPSSAS 0 0K 0 mps 0 0K 0 mpr_user 0 0K 0 MPRSAS 0 0K 0 mpr 0 0K 0 mfibuf 0 0K 0 md_sectors 0 0K 0 md_disk 0 0K 0 malodev 0 0K 0 LED 0 0K 0 ix_sriov 0 0K 0 ix 0 0K 0 ipsbuf 0 0K 0 ciss_data 0 0K 0 BACKLIGHT 0 0K 0 ath_hal 0 0K 0 athdev 0 0K 0 ata_pci 0 0K 0 ata_dma 0 0K 0 ata_generic 0 0K 0 AHCI driver 0 0K 0 agp 0 0K 0 acpipwr 0 0K 0 acpi_perf 0 0K 0 acpicmbat 0 0K 0 aacraidcam 0 0K 0 aacraid_buf 0 0K 0 aaccam 0 0K 0 aacbuf 0 0K 0 zstd 0 0K 0 XZ_DEC 0 0K 0 nvlist 0 0K 0 SCSI ENC 0 0K 0 SCSI sa 0 0K 0 scsi_pass 0 0K 0 scsi_da 0 0K 70 ata_da 0 0K 0 scsi_ch 0 0K 0 scsi_cd 0 0K 0 nvme_da 0 0K 0 CAM CCB 0 0K 523 CAM ccb queue 0 0K 0 db> show uma Zone Size Used Free Requests Sleeps Bucket Total Mem XFree mbuf_jumbo_page 4096 8320 1078 12036 0 254 38494208 0 mbuf 256 8611 1051 14410 0 254 2473472 0 BUF TRIE 152 227 11577 494 0 62 1794208 0 malloc-384 384 4118 52 4118 0 30 1601280 0 malloc-128 128 11377 93 11385 0 126 1468160 0 tcp_log 416 515 2788 3674 0 254 1374048 0 malloc-4096 4096 331 1 495 0 2 1359872 0 UMA Slabs 0 112 10867 35 10867 0 126 1221024 0 mbuf_cluster 2048 508 0 508 0 254 1040384 0 RADIX NODE 152 6686 147 26742 0 62 1038616 0 vmem btag 56 16019 76 16019 0 254 901320 0 FFS inode 1168 527 26 553 0 8 645904 0 malloc-65536 65536 9 0 12 0 1 589824 0 pbuf 2624 0 202 0 0 2 530048 0 socket 1024 25 483 1349 0 254 520192 0 lkpicurr 168 2 3094 2 0 62 520128 0 malloc-2048 2048 114 30 1337 0 8 294912 0 VM OBJECT 248 1134 50 13371 0 62 293632 0 malloc-4096 4096 66 2 959 0 2 278528 0 256 Bucket 2048 125 11 937 0 8 278528 0 VNODE 440 563 67 591 0 30 277200 0 THREAD 1872 135 9 141 0 8 269568 0 malloc-65536 65536 4 0 4 0 1 262144 0 malloc-64 64 3876 219 4650 0 254 262080 0 malloc-16 16 14325 175 14396 0 254 232000 0 DEVCTL 1024 20 200 147 0 0 225280 0 malloc-16384 16384 12 1 230 0 1 212992 0 malloc-65536 65536 1 2 169 0 1 196608 0 malloc-128 128 1189 330 28883 0 126 194432 0 UMA Zones 768 237 2 237 0 16 183552 0 malloc-256 256 560 130 865 0 62 176640 0 lkpimm 56 1 3095 1 0 254 173376 0 malloc-32 32 5275 143 5291 0 254 173376 0 unpcb 320 11 505 1167 0 254 165120 0 malloc-128 128 1012 135 2119 0 126 146816 0 FFS2 dinode 256 527 43 553 0 62 145920 0 MAP ENTRY 96 1319 193 41532 0 126 145152 0 FPU_save_area 832 137 25 153 0 16 134784 0 S VFS Cache 104 996 291 1045 0 126 133848 0 malloc-65536 65536 2 0 2 0 1 131072 0 malloc-1024 1024 110 18 127 0 16 131072 0 mbuf_packet 256 0 508 130 0 254 130048 0 ksiginfo 112 50 994 68 0 126 116928 0 malloc-8192 8192 11 2 118 0 1 106496 0 malloc-32768 32768 2 1 13 0 1 98304 0 malloc-32768 32768 3 0 3 0 1 98304 0 g_bio 408 0 240 5133 0 30 97920 0 malloc-256 256 301 74 1028 0 62 96000 0 PROC 1376 57 9 825 0 8 90816 0 UMA Kegs 384 224 9 224 0 30 89472 0 128 Bucket 1024 40 43 232 0 16 84992 0 filedesc0 1072 58 12 826 0 8 75040 0 malloc-64 64 480 591 955 0 254 68544 0 malloc-64 64 516 555 14822 0 254 68544 0 malloc-128 128 316 211 553 0 126 67456 0 malloc-65536 65536 1 0 1 0 1 65536 0 malloc-65536 65536 0 1 8 0 1 65536 0 malloc-32768 32768 2 0 2 0 1 65536 0 malloc-32768 32768 0 2 120 0 1 65536 0 malloc-8192 8192 8 0 9 0 1 65536 0 malloc-4096 4096 13 3 27 0 2 65536 0 64 Bucket 512 71 57 1643 0 30 65536 0 malloc-384 384 92 58 160 0 30 57600 0 malloc-64 64 268 551 7587 0 254 52416 0 malloc-128 128 185 218 307 0 126 51584 0 malloc-256 256 157 38 178 0 62 49920 0 malloc-256 256 62 133 679 0 62 49920 0 32 Bucket 256 55 140 365 0 62 49920 0 DIRHASH 1024 34 14 34 0 16 49152 0 NAMEI 1024 0 48 12658 0 16 49152 0 malloc-16384 16384 3 0 3 0 1 49152 0 malloc-4096 4096 10 2 15 0 2 49152 0 malloc-2048 2048 10 14 33 0 8 49152 0 malloc-1024 1024 13 35 1705 0 16 49152 0 malloc-384 384 91 29 744 0 30 46080 0 da_ccb 544 0 84 1389 0 16 45696 0 syncache 168 0 264 3 0 254 44352 0 pcpu-8 8 4692 428 4848 0 254 40960 0 udp_inpcb 408 7 83 145 0 30 36720 0 malloc-64 64 90 477 114 0 254 36288 0 malloc-64 64 79 488 1539 0 254 36288 0 malloc-64 64 291 276 1128 0 254 36288 0 malloc-128 128 10 269 18 0 126 35712 0 routing nhops 256 26 109 33 0 62 34560 0 ttyoutq 256 72 63 160 0 62 34560 0 malloc-384 384 53 37 77 0 30 34560 0 malloc-256 256 3 132 112 0 62 34560 0 malloc-256 256 29 106 63 0 62 34560 0 malloc-256 256 29 106 709 0 62 34560 0 malloc-4096 4096 7 1 486 0 2 32768 0 malloc-2048 2048 3 13 3 0 8 32768 0 malloc-2048 2048 4 12 112 0 8 32768 0 malloc-2048 2048 5 11 21 0 8 32768 0 malloc-1024 1024 1 31 6 0 16 32768 0 malloc-1024 1024 18 14 37 0 16 32768 0 malloc-1024 1024 6 26 10 0 16 32768 0 malloc-1024 1024 9 23 10 0 16 32768 0 malloc-1024 1024 11 21 11 0 16 32768 0 malloc-512 512 3 61 174 0 30 32768 0 malloc-512 512 2 62 22 0 30 32768 0 malloc-512 512 5 59 18 0 30 32768 0 malloc-512 512 4 60 4 0 30 32768 0 malloc-512 512 8 56 9 0 30 32768 0 pcpu-64 64 496 16 496 0 254 32768 0 ttyinq 160 135 65 300 0 62 32000 0 Files 80 172 228 6791 0 126 32000 0 PGRP 120 25 239 37 0 126 31680 0 VMSPACE 584 37 12 806 0 16 28616 0 sctp_laddr 48 0 588 12 0 254 28224 0 malloc-32 32 382 500 950 0 254 28224 0 16 Bucket 144 53 143 267 0 62 28224 0 4 Bucket 48 5 583 6 0 254 28224 0 AIO 208 2 131 3 0 62 27664 0 TURNSTILE 136 145 44 145 0 62 25704 0 cpuset 200 7 121 7 0 62 25600 0 malloc-8192 8192 2 1 4 0 1 24576 0 malloc-4096 4096 2 4 186 0 2 24576 0 pipe 736 20 13 288 0 16 24288 0 ertt_txseginfo 40 0 606 187 0 254 24240 0 PWD 40 20 586 104 0 254 24240 0 rtentry 168 29 115 33 0 62 24192 0 8 Bucket 80 41 259 412 0 126 24000 0 tcp_inpcb 1304 5 13 8 0 8 23472 0 malloc-384 384 2 58 3 0 30 23040 0 malloc-384 384 7 53 7 0 30 23040 0 ripcb 376 1 59 4 0 30 22560 0 Mountpoints 2816 2 6 2 0 4 22528 0 SLEEPQUEUE 88 145 111 145 0 126 22528 0 clpbuf 2624 0 8 23 0 4 20992 0 hostcache 64 1 314 1 0 254 20160 0 ertt 72 5 275 8 0 126 20160 0 malloc-64 64 3 312 3 0 254 20160 0 malloc-32 32 196 434 242 0 254 20160 0 malloc-32 32 41 589 86 0 254 20160 0 malloc-32 32 66 564 881 0 254 20160 0 malloc-32 32 75 555 3943 0 254 20160 0 malloc-32 32 3 627 30 0 254 20160 0 2 Bucket 32 45 585 324 0 254 20160 0 malloc-128 128 65 90 69 0 126 19840 0 malloc-128 128 1 154 1 0 126 19840 0 AIOCB 552 2 33 3 0 16 19320 0 malloc-256 256 4 71 4 0 62 19200 0 vmem 1856 2 7 2 0 8 16704 0 epoch_record pcpu 256 4 60 4 0 62 16384 0 malloc-16384 16384 1 0 2 0 1 16384 0 malloc-16384 16384 1 0 1 0 1 16384 0 malloc-8192 8192 1 1 2 0 1 16384 0 malloc-8192 8192 2 0 2 0 1 16384 0 malloc-2048 2048 3 5 3 0 8 16384 0 malloc-2048 2048 2 6 2 0 8 16384 0 malloc-2048 2048 2 6 2 0 8 16384 0 malloc-1024 1024 8 8 8 0 16 16384 0 SMR CPU 32 8 503 8 0 254 16352 0 rl_entry 48 1 335 1 0 254 16128 0 malloc-16 16 338 662 569 0 254 16000 0 kenv 258 17 43 1066 0 30 15480 0 mqnode 416 3 33 3 0 30 14976 0 SMR SHARED 24 8 503 8 0 254 12264 0 malloc-32 32 3 375 11 0 254 12096 0 KNOTE 160 0 75 8 0 62 12000 0 malloc-16 16 40 710 57 0 254 12000 0 malloc-16 16 26 724 42 0 254 12000 0 malloc-16 16 220 530 4360 0 254 12000 0 malloc-16 16 37 713 24934 0 254 12000 0 malloc-16 16 9 741 11 0 254 12000 0 L VFS Cache 320 0 36 1 0 30 11520 0 malloc-384 384 25 5 36 0 30 11520 0 malloc-8192 8192 1 0 1 0 1 8192 0 malloc-8192 8192 0 1 19 0 1 8192 0 malloc-4096 4096 0 2 2 0 2 8192 0 pcpu-16 16 8 504 8 0 254 8192 0 vtnet_tx_hdr 24 0 334 1222 0 254 8016 0 malloc-16 16 1 499 1 0 254 8000 0 UMA Slabs 1 176 9 13 9 0 62 3872 0 KMAP ENTRY 96 12 27 14 0 0 3744 0 FFS1 dinode 128 0 0 0 0 126 0 0 ada_ccb 272 0 0 0 0 30 0 0 swblk 136 0 0 0 0 62 0 0 swpctrie 152 0 0 0 0 62 0 0 cdg_qdiffsample 16 0 0 0 0 254 0 0 pf state scrubs 40 0 0 0 0 254 0 0 pf frag entries 40 0 0 0 0 254 0 0 pf frags 256 0 0 0 0 62 0 0 pf table entries 160 0 0 0 0 254 0 0 pf table entry counters 64 0 0 0 0 254 0 0 pf UDP mappings 104 0 0 0 0 126 0 0 pf source nodes 152 0 0 0 0 254 0 0 pf state keys 88 0 0 0 0 126 0 0 pf states 384 0 0 0 0 254 0 0 pf tags 104 0 0 0 0 126 0 0 pf mtags 184 0 0 0 0 62 0 0 tcp_rack_pcb 1088 0 0 0 0 8 0 0 tcp_rack_map 128 0 0 0 0 126 0 0 tcp_bbr_pcb 896 0 0 0 0 16 0 0 tcp_bbr_map 128 0 0 0 0 126 0 0 tfo_ccache_entries 80 0 0 0 0 126 0 0 tfo 4 0 0 0 0 254 0 0 sackhole 32 0 0 0 0 254 0 0 ipq 56 0 0 0 0 254 0 0 sctp_asconf_ack 48 0 0 0 0 254 0 0 sctp_asconf 40 0 0 0 0 254 0 0 sctp_stream_msg_out 112 0 0 0 0 254 0 0 sctp_readq 152 0 0 0 0 254 0 0 sctp_chunk 152 0 0 0 0 254 0 0 sctp_raddr 736 0 0 0 0 254 0 0 sctp_asoc 2256 0 0 0 0 254 0 0 sctp_ep 1152 0 0 0 0 254 0 0 tcp_log_id_node 120 0 0 0 0 126 0 0 tcp_log_id_bucket 176 0 0 0 0 62 0 0 tcpreass 48 0 0 0 0 254 0 0 udplite_inpcb 408 0 0 0 0 30 0 0 IPsec SA lft_c 16 0 0 0 0 254 0 0 itimer 352 0 0 0 0 30 0 0 AIOLIO 272 0 0 0 0 30 0 0 mqnotifier 216 0 0 0 0 62 0 0 mvdata 64 0 0 0 0 254 0 0 mqueue 248 0 0 0 0 62 0 0 TMPFS node 240 0 0 0 0 62 0 0 NCLNODE 608 0 0 0 0 16 0 0 LTS VFS Cache 360 0 0 0 0 30 0 0 STS VFS Cache 144 0 0 0 0 62 0 0 cryptop 280 0 0 0 0 30 0 0 linux_dma_object 32 0 0 0 0 254 0 0 linux_dma_pctrie 152 0 0 0 0 62 0 0 IOMMU_MAP_ENTRY 112 0 0 0 0 126 0 0 skbuff 1808 0 0 0 0 8 0 0 mbuf_jumbo_16k 16384 0 0 0 0 254 0 0 mbuf_jumbo_9k 9216 0 0 0 0 254 0 0 audit_record 1280 0 0 0 0 8 0 0 domainset 40 0 0 0 0 254 0 0 MAC labels 40 0 0 0 0 254 0 0 vnpbuf 2624 0 0 0 0 16 0 0 nfspbuf 2624 0 0 0 0 4 0 0 swwbuf 2624 0 0 0 0 2 0 0 swrbuf 2624 0 0 0 0 4 0 0 umtx_shm 88 0 0 0 0 126 0 0 umtx pi 96 0 0 0 0 126 0 0 rangeset pctrie nodes 152 0 0 0 0 62 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-65536 65536 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-32768 32768 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-16384 16384 0 0 0 0 1 0 0 malloc-8192 8192 0 0 0 0 1 0 0 malloc-4096 4096 0 0 0 0 2 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-512 512 0 0 0 0 30 0 0 malloc-384 384 0 0 0 0 30 0 0 pcpu-32 32 0 0 0 0 254 0 0 pcpu-4 4 0 0 0 0 254 0 0 fakepg 104 0 0 0 0 126 0 0 UMA Hash 256 0 0 0 0 62 0 0 db> show all tcpcbs/l